Level 3 - Palo Alto VM Series Enforcement

This service offers in-depth traffic analysis to identify gaps in existing policies and provide evidence-based recommendations to optimize the AWS security platform, avoiding generic best-practice approaches.

It includes analysis of 10% of the security policies and associated profiles, evaluating key elements such as Content-ID, Anti-virus, Anti-spyware, vulnerability protection, URL filtering, file blocking, DNS sinkhole and Wildfire analysis.

Security profile assessments, threat analysis and attack surface reduction are also performed. The service includes the installation of a reporting package, detailed reporting on threats and changes made, and up to four four-hour remote sessions for support and validation.

• Analysis of 10% of the security policies and the security profiles associated with them.
• Configuration of Content-ID elements include: Log forwarding, Anti-virus, Anti-spyware, Vulnerability protection, URL filtering, File blocking, DNS sinkhole, Wildfire Analysis.
• Perform security gap analysis and attack surface reduction.
• Installation of a network analysis reporting package.
• Execution of traffic and threat analysis.
• Evaluating security profiles.
• Create a threat analysis report, and a detailed document with the changes made to the network.
• Up to a maximum of four (4) remote sessions of maximum four (4) hours each.